In the Claims 

Claims remaining in tlie application are as follows: 

1 . (Currently amended) A method of managing traffic in a first set of nodes of a 
computer network having first set of nodes and a second set of nodes comprising: 

determining a source associated with an amount of network traffic over the 
first set of nodes which exceeds a threshold, the source being outside 
a group of network elements assigned to the first set of nodes; and 

automatically displaying an indication of the source in response to 

determining the source, wherein th e f i rst s e t of nod e s i s a f i rst VLAN 
and the second sot of nodos i s a second VLAN determining the source 
includes: 

determining top talker sources over the first VLAN and the 
second VLAN: 

determining VLAN identifiers for the top talker sources: and 
displaying the indication if the VLAN identifier of at least one of 

the top talker sources is not the same as the VLAN 

identifier of a VLAN being tested . 

2. (Canceled) 

3. (Original) The method of claim 1 , wherein the indication is a user name 
associated with the source. 

4. (Previously presented) The method of claim 1 , wherein the source is assigned to 
the second VLAN, the method comprising: 

reassigning the source to the first VLAN in response to determining the 
source. 

5. (Original) The method of claim 4, wherein the source is automatically reassigned 

6. (Previously presented) The method of claim 1 , wherein traffic data is obtained 
from the first VLAN using a network management protocol. 
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7. (Previously presented) The method of claim 6, wherein the traffic data is 
obtained using a remote monitoring protocol. 

8. (Previously presented) The method of claim 1, wherein the determination of the 
source includes determining the top sources of traffic on the first VLAN. 

9. (Currently amended) A computer for managing traffic in a first set of nodes of a 
computer network having a first set of nodes and a second set of nodes, the 
computer comprising: 

a display; and 

a processor configured to; 

determine a source associated with an amount of network traffic over a 

first set of nodes which exceeds a threshold, 
determine whether the source is _bo i ng outside a group of network 
elements assigned to the first set of nodes by checking top 
talker data to determine which of a plurality of top talker sources 
are not from the first set of nodes , the processor configured to 
automatically send to the display an indication of the source in 
response to determining the source, wherein the first set of 
nodes is a first VLAN and the second set of nodes is a second 
VLAN. 

10. (Canceled) 

1 1 . (Previously presented) The computer of claim 9, wherein the indication is a 
user name associated with the source. 

12. (Previously presented) The computer of claim 9, wherein the source is 
assigned to the second VLAN, and wherein the processor is configured to reassign 
the source to the first VLAN in response to determining the source. 

13. (Previously presented) The computer of claim 9, wherein the processor is 
configured to obtain traffic data from the first VLAN using a network management 
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protocol. 

14. (Previously presented) The computer of claim 13, wherein the processor is 
configured to 

obtain traffic data using a remote monitoring protocol. 

1 5. (Previously presented) The computer of claim 9, wherein the processor is 
configured to 

identify any sources of traffic which are associated with a given threshold of traffic 
on the first VLAN. 

16. (Currently amended) A system for managing traffic in a first set of nodes of a 
computer network comprising: 

a first set of nodes; and 

a computer coupled with the first set of nodes and configured to determine a 
source associated with an amount of network traffic over the first set of 
nodes which exceeds a threshold, and to further determine whether 
the source js _bo i ng outside a group of network elements assigned to 
the first set of nodes bv accessing source identifiers of top talker 
souces from management data , the computer configured to 
automatically display an indication of the source in response to 
determining the source, wherein the first set of nodes is a first VLAN 
and the second set of nodes is a second VLAN. 

17. (Canceled) 

18. (Original) The system of claim 16, wherein the indication is a user name 
associated with the source. 

19. (Previously presented) The system of claim 16, wherein the source is assigned 
to the second VLAN within the system, and wherein the computer is configured to 
reassign them source to the first VLAN in response to determining the source. 

20. (Previously presented) The system of claim 16, wherein the computer is 
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configured to obtain traffic data from the first VLAN using a network management 
protocol. 

21 . (Previously presented) The system of claim 20, wherein the computer is 
configured to obtain traffic data from the first VLAN using a remote monitoring 
protocol. 

22. (Previously presented) The system of claim 16, wherein the computer is 
configured to identify any sources of traffic which are associated with a given 
threshold of traffic on the first VLAN. 

23. (Currently amended) A computer-readable medium containing a program for 
managing traffic in a first set of nodes of a computer network having a first set of 
nodes and a second set of nodes, the program comprising: 

determining a source associated with an amount of network traffic over the 

first set of nodes which exceeds a threshold, 
determining whether the source is b ei ng outside a group of network elements 

assigned to the first set of nodes based on whether source identifiers 

for top talker sources are the same as a source identifier for the first 

set of nodes : and 
automatically displaying an indication of the source in response to 

determining the source, wherein the first set of nodes is a first VLAN 

and the second set of nodes is a second VLAN. 

24. (Canceled) 

25. (Original) The computer-readable medium containing a program of claim 23, 
wherein the indication is a user name associated with the source. 

26. (Previously presented) The computer-readable medium containing a program 
of claim 23, wherein the source is assigned to the second VLAN, the method 
comprising: reassigning the source to the first VLAN in response to determining the 
source. 
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27. (Original) The computer-readable medium containing a program of claim 26, 
wherein the source is automatically reassigned. 

28. (Previously presented) The computer-readable medium containing a program 
of claim 23, wherein traffic data is obtained from the first VLAN using a network 
management protocol. 

29. (Previously presented) The computer-readable medium containing a program 
of claim 28, wherein the traffic data is obtained using a remote monitoring protocol. 

30. (Previously presented) The computer-readable medium containing a program 
of claim 23, wherein the determination of the source includes identifying any 
sources of traffic which are associated with a given threshold of traffic on the first 
VLAN. 
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